AIRBUS DEFENCE AND SPACE LIMITED

Cyber Range Training and Simulation Platform

CyberRange is an advanced simulation solution that allows you to easily model IT/OT systems composed of tens or hundreds of machines and simulate realistic scenarios including real cyber attacks. It is accessible from the cloud and can be used to deliver all manner of training and cyber resilience exercise scenarios.

Features

• Modelling of real or representive systems
• Intergrated network traffic genertor
• Automated generation of incident scenarios
• Set of configurable attacks (secuirty incidents) ready to use
• Expandable asset catalogs
• Semi-automatic configuration of networks
• Backup and deployment of topologies
• Configuration and management of the IT action
• Collaborative workspace
• Management of isolated workareas

Benefits

• Simulation environment to use or create large IT/EO systems
• Increase productivity and efficiency through the use of component libraries
• Increase productivity and efficiency through deployment capabilities
• Increase productivity and efficiency through network configuration
• Shared technical base to work in teams
• Shared technical base to work on the same project simultaneously
• Shared technical base to exchange resouces (machine models)
• Shared technical base to exchange resouces (topologies)
• Shared technical base to exchange resouces (scenario)

£3,944 a unit a month

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at CSOC@airbus.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

797562041749218

Contact

Airbus Customer Service Operation Centre
+44 (0) 1633715000
CSOC@airbus.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: The CyberRange software needs to be procured in parallel with our CyberRange consulting support service in order that we can ensure the system is configured to align with customer requirements, and to support scenario development
• System requirements:
  • Service can be accessed via all modern web browsers
  • Firefox and Chrome recommended

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Support is provided during office hours – 08.00 – 18.00 CET / CEST time.; Extra support during weekend & bank holidays can be provided upon request (as an extra)
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: Yes, at an extra cost
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Via WEB interafce
• Web chat accessibility testing: N/A
• Onsite support: Yes, at extra cost
• Support levels: Any request or defect from GC12 Customer will be addressed to Airbus Cybersecurity (ACS) as level 1 of support. All these requests will be qualified by ACS and the severity level will be defined . Escalation to level 2 and level 3 are managed internally by ACS.; ; Standard support for CyberRange cloud is integrated in the service, meaning that there is no additional cost or service to purchase.; ; Relation with customer is handled by ACS support level 1
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We provide extensive user documentation and starter pack including topology & scenario.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Content created on CyberRange cloud service can be exported though simple actions.
• End-of-contract process: Access to CyberRange Cloud is open for a time frame according to the initial order.; If no extension is purchased before the end of the subscription period, service access is interrupted from the day following the end of the subscription.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: All platform functionality is available from the GUI as well as via a command line utility allowing automation through scripts. Both of these means are based on a documented Programmable Application Interface (API) that can be used by a third party application
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: No
• Customisation available: No

Scaling

• Independence of resources: Resources are dedicated to each WZ (=to each user) guaranteeing a reliable experience, consistent with Airbus Cloud CyberRange product description.

Analytics

• Service usage metrics: Yes
• Metrics types: A monitoring section is available on CyberRange allowing the administration team to have an overall health status of the CyberRange platform.; All CyberRange interactions are logged allowing the administrator to analyse the logs by logging in to the server as an administrator.
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: Encryption on virtual machine can be activated
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: CyberRange offers several types of content to achieve its simulation capabilities: topologies, virtual machines, containers, attacks, traffic generators and scenarios. These elements can be backed up and restored in a structural format called a "Bundle". The bundle format can integrate one or more elements to shape a coherent set of content for dedicated purposes.
• Data export formats: Other
• Other data export formats: Bundle
• Data import formats: Other
• Other data import formats:
  • Bundle
  • VMDK
  • Docker

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: By default, service is not connected with the buyer network.
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Airbus CyberSecurity manage Hardware Maintenance Support and Software Maintenance Support within the following Service Level Agreement (SLA) :; Severity (S), response time ( T), Workaround or Resolution (R) ; S1 / T = 4 hours / R = 6 days; S2 / T = 1 day / R = 7 days; S3 / T = 1 day / R = 10 days; Specific SLA including refund policy can be discussed upon request.
• Approach to resilience: Available on request
• Outage reporting: A monitoring section is available on CyberRange allowing the administration team to have an overall health status of the CyberRange platform. ; Outage on the whole service are reported by the support team to each impacted user by email.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Airbus CyberRange offers user profile management to control access of those elements to work areas. By configuring user profiles, it is possible to restrict user access to one or more work areas or management interfaces and support channels
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Available on request

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Product roadmap is driven by product management; Evolution ar5e registered on internal tool and communicated to a customer in a new version (major/minor/patch) release notes; Quality is involved in the process to ensure consistency & potential impact evolution at all levels
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: In-house process
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Undisclosed
• Incident management type: Undisclosed
• Incident management approach: Undisclosed

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Today, data is used in all aspects of life to support good decision making. From civil governments, mapping institutions and local land administration authorities to NGO’s fighting climate change and deforestation and charitable organisations dealing with humanitarian disasters, many organisations rely on geospatial images to help them make timely decisions, often in times of crisis. This information is critical for responsible land management, mapping changes, protecting natural resources, monitoring urbanisation and planning sustainable infrastructure developments. Based on 35 years of experience in cartography, urban planning and mapping projects, we offer a wide range of geospatial imagery and reference layers, and expertise in mapping techniques and services including spatial data infrastructure solutions which can help governments in these areas.; ; Sustainability at Airbus means uniting and safeguarding the world in a safe, ethical, socially and environmentally responsible way. We have a comprehensive sustainability strategy built on four core commitments:; ; ● Lead the journey towards clean aerospace; ● Respect human rights and foster inclusion; ● Build our business on the foundation of safety and quality; ● Exemplify Business integrity; ; These commitments guide our approach to the way we do business and how we design our products and services. More information at: https://www.airbus.com/en/sustainability/sustainability-commitments; ; Airbus manages its environmental impacts using an Environmental Management System (EMS) that is certified to ISO14001:2015 and verified compliance annually. Airbus has produced Environmental Management Plans for all Airbus sites. The Airbus group ‘2030 Vision’ aims to reduce energy use and carbon emissions, waste production, water consumption and make improvements to the environmental efficiency of the supply chain.; ; In 2022 we also published our Carbon Reduction Plan https://www.airbus.com/sites/g/files/jlcbta136/files/2022-04/Airbus%20Defence%20and%20Space%20Ltd%20Carbon%20Reduction%20Plan.pdf for Airbus Defence and Space UK. By 2023 Airbus aims to source 100% of our electricity from renewable sources.
• Covid-19 recovery:

  Covid-19 recovery

  In 2020 home working became the new normal for many and post lockdown, flexible and/or hybrid working arrangements are common practice. This change enabled many positives but also comes with additional cyber crime risk for organisations.; ; The COVID-19 crisis in particular demonstrated the rapidity and adaptability with which hacker groups use any event to steal information, personal data, intellectual property and money from victims. The European Commission reported a rise in criminal activity as a result of the increased amount of time that people spend online at home; remote workers are particularly vulnerable to cyber attacks.; Cybersecurity is a key business activity for Airbus. A dedicated business unit covers Airbus protection needs as well as those of governments, militaries, organisations and critical national infrastructure, for instance monitoring services provided 24 hours a day, 365 days a year. ; To meet the evolving needs of customers, Airbus leverages a diverse portfolio of cyber security solutions that includes managed security services, the protection of industrial control systems, encryption, key management and consultancy services. ; Airbus is committed to good security practice and operates in accordance with Airbus Information Security Directives and Methods which are aligned to the requirements of ISO/IEC 27001. Further to this some business areas providing these services operate Information Security Management Systems certified to ISO/IEC 27001.; Following the COVID-19 outbreak in 2020 Airbus adapted and evolved our ways of working to keep employees, suppliers and customers safe whilst continuing to deliver vital services to keep UK communications open / images supplied / data secure. In most cases employees are able to work remotely, keeping physical contact to a minimum without compromising on reliability or quality. Where employees do need to interact with others individuals are encouraged to take LFT’s and we maintain that anyone testing positive should continue to isolate.
• Tackling economic inequality:

  Tackling economic inequality

  Airbus’ economic footprint spans the length and breadth of the UK. In 2020 we supported 86,400 UK jobs, compared to 128,300 pre-pandemic. In 2019, some £2.6 billion (45%) of UK procurement was with suppliers based in the 10% most deprived local authorities, identified by the Index of Multiple Deprivation. We recognise the importance of, and are committed to, driving social value and tackling economic inequality by supporting the growth of UK-based SMEs and start ups through monthly working groups across Airbus in UK , supply chain and infrastructure. We work in close partnership with suppliers to support, collaborate and deliver the best service for our end customers and have signed up to the Prompt Payment Code to ensure that SME suppliers, are timely paid for the work they do https://check-payment-practices.service.gov.uk/report/54530; ; Led by our procurement function, Airbus seeks the latest supplier innovations by inviting technology companies to showcase their latest developments on a monthly basis. We assess the suitability and applicability of these innovative technologies in our customer projects. ; ; We also recognise that education and access to opportunity is a key driver in making the UK a fairer society. In 2021 our virtual work experience programme saw over 4,000 students from across the UK engage with us and discover opportunities a career in our industry can offer. This format enabled us to reach young people outside our local communities and we targeted those who may face additional barriers to skilled employment; 20% of participants receive free school meals and 40% would be the first generation in their family to attend university. We hope to see more young people apply to our 129 apprenticeship, intern or graduate future programmes and aim to increase participation by 20% in 2022 with greater focus on attracting pupils from across our diverse society.
• Equal opportunity:

  Equal opportunity

  Airbus strives to create a safe environment and inclusive culture, endeavoring to recruit, develop and retain a diverse pool of talent which reflects our customers, suppliers and the communities around us. ; ; The Airbus careers site https://www.airbus.com/en/careers is W3C accessible enabling applicants with visual or hearing impairments to adapt the site to suit their needs. New offices are accessible, with hearing loops in larger meeting rooms. Flexible IT and smartphones are provided to enable remote working helping employees balance work and personal commitments and gender neutral toilets have been installed in newer buildings.; ; We are committed to achieving gender parity and are transparent with our gender pay gap figures, releasing reports annually.; ; Employee Resource Groups for minority communities and their allies are open to all and run regular social and educational sessions promoting conversation and understanding. Online learning covering inclusion and diversity topics are available to all employees and as of 2020 unconscious bias training was compulsory.; ; Airbus sees the diversity we have as an asset and aim to ensure that everyone feels included and able to bring their full selves to work. This results in happier more productive employees who better reflect the diversity of our suppliers, customers and wider communities.
• Wellbeing:

  Wellbeing

  At Airbus we believe our people are our most valuable asset and so to help keep our teams safe and healthy, the Environment, Health and Safety (EHS) Department provides a UK-wide consultancy and advisory service which is available to all managers and employees. The department is staffed by highly qualified professionals in occupational health, occupational hygiene, chemical management, fire safety, occupational safety and environmental management.; ; To support good mental health and wellbeing, the Company has a wide range of resources to help manage mental health problems, and resources for managers and teams to help support each other, including trained mental health first aiders. We offer all employees access to an internal therapy service via occupational health and also have an external employee assistance program. All employees are able to access e-learnings on wellbeing and mental health and mental health awareness and mental health first aid training courses are made available each year. ; ; Keeping our employees fit and well helps reduce demand on local NHS services and ensures that our people are able to support customers as expected. Most of us will experience illness at some point in our lives; we offer comprehensive, enhanced sick pay so that people can focus on getting well and helping to keep everyone safe.

Pricing

• Price: £3,944 a unit a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at CSOC@airbus.com. Tell them what format you need. It will help if you say what assistive technology you use.